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Abstract 



The standard inputs given to a quantum machine are classical binary strings. In 
this view, any quantum complexity class is a collection of subsets of {0, 1}* . How- 
ever, a quantum machine can also accept quantum states as its input. T. Yamakami 
has introduced a general framework for quantum operators and inputs 1 18 ]. In this 
paper we present several quantum languages within this model and by generalizing 
the complexity classes QMA and QCMA we analyze the complexity of the intro- 
duced languages. We also discuss how to derive a classical language from a given 
quantum language and as a result we introduce new QCMA and QMA languages. 

1 Introduction 

One of the goals of complexity theory is to classify problems as to their intrinsic com- 
putational complexity. To date researchers have made a great deal of progress in clas- 
sifying classical problems into general complexity classes, which characterize at least 
in a rough way their inherent difficulty. While the definition of classical complexity 
classes is based on a classical model, the definition of quantum complexity classes is 
based on a quantum machine. 

Loosely speaking, a classical problem is a relation of strings over the alphabet 
{0, 1}. Accordingly, the inputs to a classical or quantum machine are classical (binary) 
strings which represent instances of the underlying problem. A quantum machine can 
also accept quantum states as its input. In this general picture we consider a quantum 
problem to be a property of quantum states, that is checkable by a quantum machine. 
Within this paradigm we aim to decide whether a quantum state satisfies a given prop- 
erty or whether it is far from all quantum states satisfying that property. This can be 
considered as an extension of the quantum property testing where one uses a quantum 
machine to test a property of classical objects J5||51- 

T. Yamakami provided another perspective on quantum problems, by introducing 
a general framework for quantum inputs and quantum operators, where quantum non- 
determinism is described in a novel way 1 18 1. Furthermore, he constructed a quantum 
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hierarchy similar to the Meyer-Stockmeyer polynomial hierarchy, based on two-sided 
bounded-error quantum computation. He also defined the notion of quantum partial 
decision problem as a pair of accepted and rejected sets of quantum states. As we will 
see later these two approaches for describing quantum problems are closely related. 

In this paper, we introduce different quantum languages which exhibit interest- 
ing relations on quantum states. In order to analyze the complexity of these quantum 
languages we extend the notion of complexity classes QMA and QCMA to quantum 
inputs. Finally we discuss how to derive a classical language from a given quantum 
language. 



2 Preliminaries 

We begin by defining our terms. We use Dirac's notation | <j>) to describe a pure quantum 
state and g to describe a density matrix representation for a quantum state (pure or 
mixed). A pure quantum string of size n is a unit-norm vector in a Hilbert space of 
dimension 2™. For a given quantum string \(p), i{\4>)) denotes the size of \(j>) (the 
number of qubits in | cf>}). Following the terminology of 1 18 1, we use the notation to 
denote the set of all pure quantum strings of size n. Define = U n> o &n, to be the 
set of all finite size pure quantum strings. Since the density operator representation for 
quantum strings is better suited for parts of our discussion, we define Q, n to be the set 
of all density matrices of n qubits, and fl^ = [J n>0 Q n to be the set of all finite size 
density matrices. 

We work within the quantum network model as a mathematical model of quantum 
computation |4 ||19I . To study the complexity classes in the circuit model we use the 
concept of polynomial-time uniformly generated family, i.e. a sequence of quantum 
circuits, {C n }, one for each input length n, that can be efficiently generated by a Turing 
machine. We assume each C n runs in time polynomial in n and that it is composed 
of gates in some reasonable, universal, finite set of quantum gates 1141 . Furthermore, 
the number of gates in each C„ is not bigger than the length of the description of that 
circuit. Therefore, the size of C n is polynomial in n. We often identify a circuit C 
with the unitary operator it induces. We say that a circuit C accepts a quantum input 
\(j>) with probability p if, when we run C with input register in state \<f>) and auxiliary 
registers in |0), we observe 1 with probability p on the output register. We denote by 
Prob[C(|0)) = 1] the acceptance probability of C on input \(j>). It is well known that a 
polynomial-time quantum Turing machine and a polynomial-time uniformly generated 
family of quantum circuits are computationally equivalent. 

Considering quantum states as inputs raises the following issues. First, due to the 
no-cloning theorem, we cannot copy an unknown quantum input. Therefore, to repeat 
the same quantum computation over a given quantum input we assume that a quantum 
state is given as a black box, from which one can prepare copies of the required input 
state on request. Equivalently, we can consider that the copies of the quantum input 
are given a priori. Second, since the the space is continuous to define the notation 
of complexity classes for we consider partial decision problem over ^ x 1181 . A 
partial decision problem is a pair (^4, B) such that A.Bc $00 and A n B = 0, where 
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A indicates a set of accepted quantum strings and B indicates a set of rejected quantum 
strings. The legal region of (A, B) is A U B. 

Consider a quantum language L C $oo. We define the corresponding partial deci- 
sion problem for an arbitrary real number e > to be Pj, e = (A, B), with 

A = L 

B = {|^) e$oo | V|0) £L :|| ||>e}, 

where extra |0)'s are added to make || . || meaningful. In other words there is an illegal 
region where Pl,h cannot decide, and the size of this region is bounded by e. Note that 
deciding Pl,c is equivalent to test the global property P which defines the quantum 
states in L, since a given quantum state |</>) either satisfies the property P (belongs to 
A) or it is far from all the quantum states satisfying P (belongs to B). 

Now, in this general framework a complexity class denoted by *C is a collection of 
partial decision problems. Yamakami described these complexity classes in terms of a 
well formed quantum Turing machine with access to polynomial number of copies of 
quantum states 11 81 . Equivalently, we work within the uniform circuit family where 
polynomial number of copies of the input state are given a priori. 

Definition 1 A partial decision problem [A, B) is in *BQP if there exists a 
polynomial-time uniformly generated family of quantum networks {C n } such that for 
every \<p) G there exists a polynomial function q and a unique circuit C' m with 
m = poly (£(|0))) where: 

i) if\4>) G A then Prob[C m (|</>)® 9 W = 1] > 2/3 , 

ii) if\4>) G B then Prob[C' m (|0)® <?WI0>)) ) = 1] < 1/3 1 . 

The other complexity classes that we will refer to are QMA and QCMA, introduced 
by Knill, Kitaev and Watrous OColCll- There are several known QMA and QCMA 
languages iflOl 1161 Q] IU El H7I . Informally speaking the complexity class QMA 
(QCMA) is the class of classical decision problems for which a YES answer can be 
verified by a quantum computer with access to a quantum (classical) proof. In the next 
section we introduce several partial decision problems in *QMA and *QCMA. 

Definition 2 A partial decision problem (A, B) is in *QMA ;/ there exists a 
polynomial-time uniformly generated family of quantum networks {C n } such that for 
every \(f>) G $oo there exists a polynomial function q and a unique circuit C m with 
m = poly(£(|0))) where: 

i) if\<t>) G A then 3\Ci £ ^ with = poly(£(|0))) : 
Prob[C m (|0)®9(^l*»)|O® ?WI0>)) ) = 1] > 2/3, 

ii) if\4>) G B then V|£) G $oo with i{\Cj) = poly(i(|^») : 
Prob[C m (|</>)®5WI*>))|O® ?WI0>)) ) = 1] < 1/3 • 

We can replace 1/3 by any arbitrary small number l/poly(£(|<^))). 
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Figure 1: A quantum network for direct estimations of both linear and non-linear func- 
tions of state. The probability of finding the control (top line) qubit in state |0) at the 
output depends on the overlap of the two target states (two bottom lines). Thus estima- 
tion of this probability leads directly to an estimation of Tr g a gi, = v = 2 Pq — 1. 



The definition of the complexity class *QCMA is similar to the above, except that 
instead of |£) 6 we consider a classical state x € S* as the proof. All the above 
definitions can naturally be extended to Q^. 

It is important to note that in this paper we consider a quantum state to represent 
only the data. The case where a quantum state describe a quantum program has been 
studied in 1131 . where authors argued that to represent N distinguishable quantum 
programs (unitary operators), N orthogonal states are required. Since the number of 
possible unitary operations on m qubits is infinite, it follows that a universal quantum 
machine with quantum input as program would require an infinite number of qubits 
and thus no such machine exists. 

The final concept we introduce is a simple quantum network that can be used as 
a basic building block for direct quantum estimations of both linear and non-linear 
functionals of any quantum state g J5]|2]. The network can be realized as multiparticle 
interferometry and it provides a direct estimation of the overlap of any two unknown 
quantum states g a and gt, i.e. Tr g a g b - 

In order to explain how the network works, let us start with a general observation re- 
lated to modifications of visibility in interferometry. Consider a typical interferometric 
set-up for a single qubit: Hadamard gate, phase shift gate ip, Hadamard gate, followed 
by a measurement in the computational basis (Figure^. We modify the interferometer 
by inserting a controlled- V operation between the Hadamard gates, with its control on 
the single qubit and with V acting on two quantum systems described by g a and g b 
respectively. The operator V is the swap operator, defined as V\o)a\P)b — \ fi) a\oc)b, 
for any pure states \a) a and The action of the controlled-V^ on g a <g> g b modifies 
the interference pattern by the factor 

v = TrV (g a &> Qb) = Tr g a g b , 

where v is the new visibility. The observed modification of the visibility gives an 
estimate of Tr (g a gi,), i.e. the overlap between states g a and g b . The probability of 
finding the control qubit in state |0) at the output, Pq, is related to the visibility by 
v = 2 Pq — 1. The above network is one of the main ingredients for our discussion in 
the next section, we redefine it as follows: 
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Definition 3 Let n be an integer number. The following quantum network with 2n + 1 
qubits is called estimation network and is denoted by E n : 

(H 1 <g> I n ® I n ) o (ctrl-V) o {H 1 ® I n <g> /") . 



3 Quantum Languages 

We start by introducing a simple language in *BQP and we build up towards more 
interesting languages in *QCMA and *QMA. In what follows we say that a language 
L in $oo or £1^ belongs to a complexity class *C iff there exists a small real number e 
such that the corresponding partial decision problem Pl.e lies in *C. 

Example 4 Let f : N — * N be a function such that for all n we have f(n) < n. The 
quantum language L\ defined below belongs to *BQP : 

L\ = { \(f>) G $00 : The state of the first f{£(\4>))) qubits of\<j>) is pure} . 

Proof Let q be the state of the first m — f(t(\(p))) qubits of \<f>) (this can be prepared 
by tracing out the rest of the qubits in \<p)) and apply E m to |0) ® q. The probability 
of observing in the first register is : 

Tr(g 2 ) + 1 
P °- 2 ■ 

If q is pure, then P = 1. If g is mixed, then 1/2 < Pq < 1. Hence, in or- 
der to check that g is indeed pure we need to run E m for a polynomial number of 
times M = poly(£(|<^>))) and measure the state of the control qubit. In this case 

Po = ( ^ r ^ ) M ' which w iH he equal to 1 if g is pure or tend exponentially to 
if q is mixed. The probability of accepting g as pure when it is in fact mixed is thus 
exponentially small on the number of runs of E m . Therefore the following polynomial- 
time uniformly generated family of quantum circuits {C n } satisfies the condition of the 
definition^ and will do the job (Figure|2j: 

C m = T M ,i o{E m ®E m ®---® E m ) . 

where M — poly(^(|</>))) and Tm.i is a Toffoli type gate which flips the last qubit if 
all the first M qubits are equal to 1. Note that the the number of qubits of each C m is 
polynomial in i(\<fi}). □ 

The next example is an extension of L± and belongs to *QCMA. We can view 
Definition[2]for accepting a language in *QCMA or *QMA as an interactive protocol 
consisting of two parties, often called Merlin (with unlimited computational power) and 
Arthur (with quantum polynomial-time power). Merlin is trying to persuade Arthur that 
a quantum state g in a given language L satisfies a given property. To this end, he sends 
Arthur a polynomial-size classical or quantum state as the proof. Each party has access 
to polynomial number of copies of g. Therefore, a protocol to accept the language will 
be a polynomial-time uniformly generated family of quantum networks with classical 
or quantum inputs given by Merlin and possibly polynomial number of copies of state 
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Figure 2: A quantum network for accepting Language L\. If g (the state of the first to 
qubits of \cf))) is pure then the last qubit will be in state |1) with probability one. On 
the other hand if g is mixed the probability of measuring 1 in the last qubit decreases 
exponentially with the number of runs. 

Example 5 The quantum language L 2 defined below belongs to *QMCA : 
L2 = { \4>) € $00 : \4>) is separable with respect to two disjoint subsets of qubits} . 
In other words every \<j)) £ L2 can be written as \<fix) ® |0 2 ) where +^(|^>2)) = 

Proof Since we assume \<f>) to be pure, it follows that \4>i), \4>2) will be pure as well: 

Tr(|0)(^| 2 ) = Tr(|^)® |&)<0i| ® (<f> 2 \ 2 ) 

= Tr(|0 1 )(0 1 | 2 )Tr(|0 2 )(0 2 | 2 ) = l 

therefore: 

Tr(|0 1 )(0 1 | 2 )=Tr(| ( / )2 )(0 2 | 2 ) = l. 

The protocol for accepting L 2 uses the network family {C n } of the previous exam- 
ple. During the protocol, for \<f>) E L 2 Merlin will send a classical binary string of the 
size l(\ <f>)), called subset string, where each 1 at position i indicates that the ith qubit 
in \(j>) appears in subset (|</>i)). Given a subset string S and the corresponding quantum 
state Arthur apply the simple network of Figure [5] to prepare the corresponding 
subset state and checks its purity with the proper network C m of the previous example. 
If Merlin attempts to cheat by sending a false partition the probability of obtaining a 1 
will decrease exponentially with the number of runs. 
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Figure 3: A quantum network to prepare the corresponding subset state of the state \<fi). 
In the given classical string S, each 1 at the position i indicates that the ith qubit in \<fi) 
appears in the subset state \<pi). 



Note that any pure state \(f>), entangled with respect to two disjoint subsets of qubits 
is of the form 

N 

\<t>) = 5>i#>® 14). 

i=l 

where J2i \ c i\ 2 — 1> 1 01) ® \<$i) are an orthonormal set of states and at least two 
c; 7^ 0. On the other hand, a pure separable state is simply |</?i) ® \>P2)- Therefore, \<fi) 
is almost separable if there exists a small real number e' and a 1 < j < N such that 
\cj\ = 1 — e'. If e' < e/2, where e is the parameter defining the illegal region of Li, 
|0) is undecidable. 

□ 

Example 6 The quantum language L% defined below belongs to *QMA : 

L3 = { Q € Qqo : q is an entangled state} . 
Proof A quantum state is said to be entangled if it cannot be written in the form 

£>123..JV = CtQ l ® g 2 ® ^3 ® ■ ■ ■ ® ffAT: 

where is the state of subsystem j, and J^e C-e = 1. Checking that a generic gi23...jv 
is separable is a hard problem. However, it is possible to construct entanglement wit- 
nesses that detect the entanglement in specific entangled states, provided that the state 
is known. An entanglement witness W 1 1 51 11 21 is an operator with non-negative ex- 
pectation value on all separable states, and for which there exists an entangled state 
such that the expectation value of the witness on that state is negative. Therefore, if 
Merlin wants to persuade Arthur that a given state g is entangled, it is sufficient for him 
to send Arthur the respective entanglement witness. 
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Merlin cannot send the operator W directly as a physical state because even though 
W is an operator in the density operators' Hilbert space, it will not be a valid state 
in general. So, during the protocol for \<f>) S £3, Merlin will send W as a set of 
density operators Q\,..,,Qk (each of the dimension of \(f>)) and a classical string of k 
real numbers c,, such that W = J^i c iQi- Note that based on the construction of a 
generic W in 1 12\, the number of ft's is polynomial in l(\g)) and Cj's are polynomial 
computable real numbers. 

Now, Arthur uses Qi and \(j>) as inputs to the proper C m and computes Tr (gi\(j>)), 
for each i. Using these expectation values and numbers c$, Arthur can estimate 

Tr£>^»=Tr(I^)). 

i 

If he obtains a negative value, he knows that \<j>) is entangled. Also, in order to check 
that Merlin did send him an entanglement witness, he can prepare the basis of separable 
states (with polynomial-size) and check that the expectation value on these states is 
non-negative. 

□ 

To introduce the following language we need few definitions from |8|. Kashefi et 
al. studied the relation between preparing a set of quantum states and constructing the 
reflection operators about those states. We begin by the following natural definition of 
the "easy" states and operators: 

Definition 7 A unitary operator U on n qubits is polynomial-time computable (easy), 
if there exists a network approximately implementing U with polynomial-size in n. An 
n-qubit state \(f>) is defined to be polynomial- time preparable (easy), if there exists an 
easy operator U on poly(n) qubits such that U\0) = \<f>). 

It is well-known that if a state \<f>) is easy, then the reflection operator about that state, 
2\4>){(t>\ — I, is easy (Problem 6.2(1) in 1141 ). The inverse statement is called the 
Reflection Assumption: "if the reflection about a state is easy, the state itself is easy" 
and it is known that: 

Lemma 8 18] If there exists a quantum one-way function, then exists a counter- 
example to the Reflection Assumption. 

The next quantum language is concerned with reflection operators: 

Example 9 The quantum language L4 defined below belongs to *QCMA: 

L4 = { \tp) G : The operator 2\(j))((f)\— I is polynomial-time computable} . 

Proof 

During the protocol, for \<f>) £ L4 Merlin will send a classical description of 
the polynomial-size quantum network implementing the reflection operator — 
2\<j>)(cf)\ — I. Arthur prepares an arbitrary state (unknown to Merlin), which can 
always be written as: 

|^)= a |^)+ / 3|0 ± ) 
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and applies R<p to a copy of obtaining the output state 

\io) = a\4>) - . 

Then he uses the network E m with rn = £ \ <j>) to compute the following values unknown 
to Merlin: 

(m = I a I 2 , (1) 
= l«| 2 , (2) 
= ||a| 2 - |/3| 2 | , (3) 

and he repeats this procedure for M — poly(i?(| </>))) different Arthur will accept 
\(f>) iff at each run of the above procedure the value of a obtained from Equation 1 
satisfies Equation 2 and 3. 

Now assume that \4>) is far from all elements of L4, i.e. the reflection operator 
about \4>) is not easy, and that Merlin attempts to cheat by sending the description of 
a polynomial-size network N, where N 7^ R^. Following the above strategy, when 
Arthur applies N to = a\<f>) + f3\4> ± ) he will obtain a state of the form |£ D ) = 
a!\4>) + /3'\(f> ). If now he computes the values for the Equation 1, 2 and 3, he will get 

(m = \a>\\ 

(&|&) = \a*a' + (3*P'\ . 

If I a \ 2 ^\ a' 1 2 Arthur will detect the cheating. If on the other hand | a | 2 =| a' | 2 , 
which implies that | /3 | 2 = | f3' | 2 , we have that (£ Q |&) = || a | 2 +e ie \ (3 | 2 |, where 
9 is the relative phase between (3 and (3 1 . Whenever 9 ^ tt, Equation 3 will not be 
satisfied and Arthur will detect the cheating. □ 

Another interesting language in close relation to L4 is defined below. First we 
define the notion of a polynomial-time checkable state |20|. 

Definition 10 We define a state \4>) to be efficiently checkable there exits a 
polynomial- size quantum network implementing the following checking operator: 

c^m = \m 

C^)\Q) = a|w)|0) +PW)\l) where 
\f\i))±\(f>) : a = 0. 

Example 11 The quantum language L5 defined below belongs to *QCMA: 

L5 = { \4>) G $00 '■ \<l>) is efficiently checkable} . 

Proof The next lemma shows that L4 = L$ which implies L5 e *QCMA. □ 

Lemma 12 The quantum languages L4 and L$ are equal. 
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Proof Denote by ctrl-i?0 the controlled reflection operator which reflects the state of 
the first register about \<j>) iff the last qubit (the control qubit) is equal to 1. We show 
for any state | </>) : 

— I ® H o ctrl-i?^ o I (g> H , 
and therefore L4 = L$. It is easy to check: 

mo) m i|^)do)+|i)) 

c trl - n 1 

— * -/=w>io>+ {2{m\4>) -\m))} 

m i{2(<^M)|0) + 2(|V) - . 
If \ip) _L |0) the final state of the above computation is |1) as required. □ 



4 Discussion 

Following the work of Yamakami 1 18 1, we have considered a general framework for 
quantum machines with quantum states as input. We introduced some quantum lan- 
guages in this paradigm and showed the corresponding partial decision problems be- 
long to complexity classes *BQP, *QCMA and *QMA. These quantum languages 
can also be viewed as quantum property testing of a set of quantum states. 

This investigation of quantum properties (quantum languages) is useful for defining 
new classical languages within the framework of quantum information theory. For in- 
stance, if we consider the subset of quantum states that can be prepared in polynomial- 
time, e.g. with a polynomial-size quantum circuit, we can derive a classical language 
from the given quantum language. However, it is not clear how to extend a given clas- 
sical language to its quantum counterpart. As an example of this derivation consider 
the classical analogue of language L3: 

L' 3 = {x S E* : x describes a polynomial-size quantum network U 
and U\0) is an entangled state} , 

which belongs to QMA. 

Recently, few complete languages for QCMA and QMA have been introduced. 
Finding complete languages for *QCMA and *QMA would also be very interesting, 
but it is so far an open problem. 
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